p PatchFirst

PatchFirst · Aktuelle Sicherheitslücken

Schwachstellen im Stack Betriebssysteme · Seite 56

In den letzten 30 Tagen veröffentlichte Sicherheitslücken für Betriebssysteme: 6679. Davon im KEV-Katalog: 4.

RSS ↗ JSON ↗
Sicherheitslücken filtern
Betriebssysteme

Sicherheitslücken: 160271

  1. ALSA-2026:90449

    Nicht bewertetKorrektur verfügbar

    Important: brotli security update

    Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available general-purpose compression methods. It is similar in speed with deflate but offers more dense compression. Security Fix(es): * brotli: Out-of-Bounds Write in Google Brotli Decoder (CVE-2026-111497) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References se

    brotli brotli-devel libbrotli python3-brotliBetriebssysteme
    • Auf 1.1.0-8.el10_2.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  2. ALSA-2026:90424

    Nicht bewertetKorrektur verfügbar

    Important: buildah security update

    The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * podman: Arbitrary file write when importing OCI archive (CVE-2025-11395) * golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages (CVE-2026-56855) * net/[http:](http:) golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026

    buildah buildah-testsBetriebssysteme
    • Auf 2:1.43.4-2.el9_8 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  3. ALSA-2026:90365

    Nicht bewertetKorrektur verfügbar

    Important: kernel security, bug fix, and enhancement update

    The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: udp: Deal with race between UDP socket address change and rehash (CVE-2024-57974) * kernel: fuse: re-lock request before replacing page cache folio (CVE-2026-53388) * kernel: net/handshake: hand off the pinned file reference to accept_doit (CVE-2026-63979) * kernel: net/handshake: Drain pending requests at net namespace exit (CVE-2026-63978) * kernel: fuse: re-lock request before returning from fuse_ref_folio() (CVE-2026-64266) * kernel: net/handshake: Take a long-lived file reference at submit (CVE-2026-64523)

    kernel kernel-64k kernel-64k-core kernel-64k-debug kernel-64k-debug-core kernel-64k-debug-devel kernel-64k-debug-devel-matched kernel-64k-debug-modules kernel-64k-debug-modules-core kernel-64k-debug-modules-extra kernel-64k-devel kernel-64k-devel-matchedBetriebssysteme
    • Auf 5.14.0-687.61.1.el9_8 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  4. ALSA-2026:90362

    Nicht bewertetKorrektur verfügbar

    Important: podman security update

    The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * podman: Arbitrary file write when importing OCI archive (CVE-2025-11395) * net/[http:](http:) golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667) * crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information

    podman podman-docker podman-plugins podman-remote podman-testsBetriebssysteme
    • Auf 6:5.8.2-8.el9_8 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  5. ALSA-2026:90328

    Nicht bewertetKorrektur verfügbar

    Moderate: bind security update

    The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses (CVE-2026-19662) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    bind bind-chroot bind-devel bind-dnssec-utils bind-doc bind-libs bind-license bind-utilsBetriebssysteme
    • Auf 32:9.18.33-15.el10_2.13 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  6. ALSA-2026:89923

    Nicht bewertetKorrektur verfügbar

    Important: libreswan security update

    Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN). Security Fix(es): * libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP (CVE-2026-94453) * libreswan: Denial of Service via sending bogus X.509 certificates (CVE-2026-77205) * libreswan: Null Pointer Dereference in PKCS#7 bundle with no CERTS (CVE-2026-77207) For more details about the security issue(s), including the impact, a

    libreswan libreswan-minimalBetriebssysteme
    • Auf 5.3.3-1.el10_2 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  7. ALSA-2026:89905

    Nicht bewertetKorrektur verfügbar

    Moderate: freeipmi security, bug fix, and enhancement update

    The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification. Security Fix(es): * FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses (CVE-2026-85504) * FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow (CVE-2026-85507) * FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow in ipmi-oem (CVE-2026-85506) * FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow (CVE-2026-85509) * FreeIPMI: FreeIPMI: Denial of Service vi

    freeipmi freeipmi-bmc-watchdog freeipmi-devel freeipmi-ipmidetectd freeipmi-ipmiseldBetriebssysteme
    • Auf 1.6.20-1.el10_2 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  8. ALSA-2026:89891

    Nicht bewertetKorrektur verfügbar

    Moderate: gcc-toolset-15-gcc security update

    The gcc-toolset-15-gcc package contains the GNU Compiler Collection version 15. Security Fix(es): * gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if (CVE-2026-102010) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    gcc-toolset-15-gcc gcc-toolset-15-gcc-c++ gcc-toolset-15-gcc-gfortran gcc-toolset-15-gcc-plugin-annobin gcc-toolset-15-gcc-plugin-devel gcc-toolset-15-libasan-devel gcc-toolset-15-libatomic-devel gcc-toolset-15-libgccjit gcc-toolset-15-libgccjit-devel gcc-toolset-15-libitm-devel gcc-toolset-15-liblsan-devel gcc-toolset-15-libquadmath-develBetriebssysteme
    • Auf 15.2.1-7.1.el10_2.alma.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  9. ALSA-2026:89860

    Nicht bewertetKorrektur verfügbar

    Important: httpd security update

    The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: httpd: HTTP response smuggling via crafted Transfer-Encoding response in mod_proxy_uwsgi (CVE-2026-63718) * httpd: httpd: Denial of Service via integer overflow in mod_dav_fs (CVE-2026-93546) * httpd: httpd: Authentication state corruption via concurrent Digest authentication requests (CVE-2026-73637) * httpd: httpd: unauthorized connection to arbitrary hosts via crafted FTP PASV response (CVE-2026-63045) * httpd: httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias (CVE-2026-6

    httpd httpd-core httpd-devel httpd-filesystem httpd-manual httpd-tools mod_ldap mod_lua mod_proxy_html mod_session mod_sslBetriebssysteme
    • Auf 1:2.4.63-13.el10_2.8 aktualisieren
    • Auf 2.4.63-13.el10_2.8 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  10. ALSA-2026:89859

    Nicht bewertetKorrektur verfügbar

    Important: flatpak security update

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fix(es): * flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin (CVE-2026-97023) * flatpak: flatpak: Arbitrary write in root context via path traversal in deploy directory files/etc (CVE-2026-97024) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    flatpak flatpak-devel flatpak-libs flatpak-selinux flatpak-session-helperBetriebssysteme
    • Auf 1.12.9-9.el8_10 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  11. ALSA-2026:89850

    Nicht bewertetKorrektur verfügbar

    Important: flatpak security update

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fix(es): * flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin (CVE-2026-97023) * flatpak: flatpak: Arbitrary write in root context via path traversal in deploy directory files/etc (CVE-2026-97024) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    flatpak flatpak-devel flatpak-session-helperBetriebssysteme
    • Auf 1.12.9-4.el9_8.6 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  12. ALSA-2026:89849

    Nicht bewertetKorrektur verfügbar

    Important: flatpak security update

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fix(es): * flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin (CVE-2026-97023) * flatpak: flatpak: Arbitrary write in root context via path traversal in deploy directory files/etc (CVE-2026-97024) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    flatpak flatpak-devel flatpak-libs flatpak-selinux flatpak-session-helperBetriebssysteme
    • Auf 1.16.0-9.el10_2.6 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  13. ALSA-2026:89830

    Nicht bewertetKorrektur verfügbar

    Moderate: gcc security update

    The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries. Security Fix(es): * gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if (CVE-2026-102010) * gcc: libstdc++ integer overflow in `new` operator (CVE-2026-95619) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    cpp gcc gcc-c++ gcc-gdb-plugin gcc-gfortran gcc-offload-nvptx gcc-plugin-annobin gcc-plugin-devel libasan libatomic libatomic-static libgccBetriebssysteme
    • Auf 8.5.0-30.el8_10.alma.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  14. ALSA-2026:89816

    Nicht bewertetKorrektur verfügbar

    Moderate: kernel security update

    The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (CVE-2026-74515) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    bpftool kernel kernel-abi-stablelists kernel-core kernel-cross-headers kernel-debug kernel-debug-core kernel-debug-devel kernel-debug-modules kernel-debug-modules-extra kernel-devel kernel-docBetriebssysteme
    • Auf 4.18.0-553.179.1.el8_10 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  15. ALSA-2026:89814

    Nicht bewertetKorrektur verfügbar

    Moderate: kernel-rt security update

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (CVE-2026-74515) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    kernel-rt kernel-rt-core kernel-rt-debug kernel-rt-debug-core kernel-rt-debug-devel kernel-rt-debug-modules kernel-rt-debug-modules-extra kernel-rt-devel kernel-rt-modules kernel-rt-modules-extraBetriebssysteme
    • Auf 4.18.0-553.179.1.rt7.520.el8_10 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  16. ALSA-2026:89761

    Nicht bewertetKorrektur verfügbar

    Important: skopeo security update

    The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * podman: Arbitrary file write when importing OCI archive (CVE-2025-11395) * net/[http:](http:) golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667) * crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in th

    skopeo skopeo-testsBetriebssysteme
    • Auf 2:1.22.2-6.el10_2 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  17. ALSA-2026:89760

    Nicht bewertetKorrektur verfügbar

    Important: container-tools:rhel8 security, bug fix, and enhancement update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * net/[http:](http:) golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667) * crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943) Bug Fix(es) and Enhancement(s): * container-tools:rhel8: buildah RPM has the wrong version (JIRA:AlmaLinux-272014) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed

    aardvark-dns aardvark-dns aardvark-dns buildah buildah-tests cockpit-podman conmon container-selinux containernetworking-plugins containers-common containers-common containers-commonBetriebssysteme
    • Auf 1:1.4.0-11.module_el8.10.0+4327+ab8e4068 aktualisieren
    • Auf 2:1-82.module_el8.10.0+3876+e55593a8 aktualisieren
    • Auf 2:1-82.module_el8.10.0+4016+efd18bf8 aktualisieren
    • Auf 2:1-82.module_el8.10.0+4120+03ad4b47 aktualisieren
    • Auf 2:1.10.1-2.module_el8.10.0+3901+4b80ecd7 aktualisieren
    • Auf 2:1.10.1-2.module_el8.10.0+4023+db236c53 aktualisieren
    • Auf 2:1.10.1-2.module_el8.10.0+4047+545787c4 aktualisieren
    • Auf 2:1.33.15-2.module_el8.10.0+4327+ab8e4068 aktualisieren
    • Auf 2:2.229.0-3.module_el8.10.0+4213+0493256b aktualisieren
    • Auf 3:2.1.10-2.module_el8.10.0+4327+ab8e4068 aktualisieren
    • Auf 84.1-1.module_el8.10.0+4102+6c76e544 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  18. ALSA-2026:89755

    Nicht bewertetKorrektur verfügbar

    Important: lrzsz security, bug fix, and enhancement update

    Lrzsz (consisting of lrz and lsz) is a cosmetically modified zmodem/ymodem/xmodem package built from the public-domain version of the rzsz package. Lrzsz was created to provide a working GNU copylefted Zmodem solution for Linux systems. Security Fix(es): * lrzsz: lrzsz: Arbitrary file overwrite via absolute path traversal in restricted mode (CVE-2026-105840) * lrzsz: lrzsz: Arbitrary command execution via crafted file names in pipe mode (CVE-2026-105841) Bug Fix(es) and Enhancement(s): * lrzsz: segfault with -s [almalinux-9.8.z] (JIRA:AlmaLinux-282108) For more details about the security issue(s), including the impact, a CV

    lrzszBetriebssysteme
    • Auf 0.12.20-58.el9_8 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  19. ALSA-2026:89754

    Nicht bewertetKorrektur verfügbar

    Moderate: freeipmi security, bug fix, and enhancement update

    The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification. Security Fix(es): * FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses (CVE-2026-85504) * FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow (CVE-2026-85507) * FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow in ipmi-oem (CVE-2026-85506) * FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow (CVE-2026-85509) * FreeIPMI: FreeIPMI: Denial of Service vi

    freeipmi freeipmi-bmc-watchdog freeipmi-devel freeipmi-ipmidetectd freeipmi-ipmiseldBetriebssysteme
    • Auf 1.6.20-1.el8_10 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  20. ALSA-2026:89753

    Nicht bewertetKorrektur verfügbar

    Moderate: freeipmi security, bug fix, and enhancement update

    The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification. Security Fix(es): * FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses (CVE-2026-85504) * FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow (CVE-2026-85507) * FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow in ipmi-oem (CVE-2026-85506) * FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow (CVE-2026-85509) * FreeIPMI: FreeIPMI: Denial of Service vi

    freeipmi freeipmi-bmc-watchdog freeipmi-devel freeipmi-ipmidetectd freeipmi-ipmiseldBetriebssysteme
    • Auf 1.6.20-1.el9_8 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

Prüfen Sie Ihren Server

Gleichen Sie Ihren installierten Stack und seine Versionen mit den aktuellen Sicherheitsmeldungen ab.

Prüfen Sie Ihren Server →